SecureExpertCleaner

[Malekal_morte]

SecureExpertCleaner est un rogue (faux anti-spyware) qui s'installe sans permission, le malware affiche de fausses alertes vous indiquant que vous êtes infecté par un spyware et vous recommande d'acheter ce faux anti-spyware Files-server pour soit disant désinfecter votre ordinateur.



Site WEB... www.secureexpertcleaner.com (89.149.227.50), même IP que le rogue VirusRemover 2008

Domain Name: SECUREEXPERTCLEANER.COM
Registrar: TLDS, LLC DBA SRSPLUS
Whois Server: whois.srsplus.com
Referral URL: http://www.srsplus.com
Name Server: NS1.SECUREEXPERTCLEANER.COM
Name Server: NS2.SECUREEXPERTCLEANER.COM
Name Server: NS3.SECUREEXPERTCLEANER.COM
Name Server: NS4.SECUREEXPERTCLEANER.COM
Status: clientTransferProhibited
Updated Date: 13-jun-2008
Creation Date: 16-apr-2008
Expiration Date: 16-apr-2009



Registrant:
Sam Akshay ([email protected])
Secureexpertcleaner Com
Boulevard Juan Pablo Segundo, 54
Tegucigalpa, NONE 0101
HN
504 2 320033

Domain Name: secureexpertcleaner.com

Administrative, Technical, Billing Contact:
Sam Akshay ([email protected])
Secureexpertcleaner Com
Boulevard Juan Pablo Segundo, 54
Tegucigalpa, NONE 0101
HN
504 2 320033

Record created on Apr 16 2008.
Record expires on Apr 16 2009.

Domain servers:
ns1.secureexpertcleaner.com
ns2.secureexpertcleaner.com
ns3.secureexpertcleaner.com
ns4.secureexpertcleaner.com

Domain Service Provider:
Sagent Group

[Malekal_morte]

Code : Tout sélectionner

1237642043.738    421 192.168.1.25 TCP_MISS/200 5192 GET http://securecleanertool.com/scns/105/?a=npfusrm-en&l=sec_105&prodabbr=3P_USEC - DIRECT/94.102.51.15 text/html
1237644043.710    535 192.168.1.25 TCP_MISS/302 526 GET http://securecleanertool.com/secure/964991d14bdf22579edcb802a2a95bb5/49c4d0e5/secureexpertcleaner.com/SecureExpertCleaner_Dual_Rezer_En.exe?a=npfusrm-en_pan&l=sec_105&f=keyin&p=scns_105&mt_info=keyin&sub=UND - DIRECT/94.102.51.15 text/html

Domain Name: SECURECLEANERTOOL.COM
Registrar: YESNIC CO. LTD.
Whois Server: whois.yesnic.com
Referral URL: http://www.yesnic.com
Name Server: NS1.COMONDNS.COM
Name Server: NS2.COMONDNS.COM
Name Server: NS3.COMONDNS.COM
Name Server: NS4.COMONDNS.COM
Status: clientTransferProhibited
Updated Date: 02-mar-2009
Creation Date: 25-feb-2009
Expiration Date: 25-feb-2010

Domain Name : securecleanertool.com

::Registrant::
Name : Preston Wasson
Email : [email protected]
Address : 4532 Dancing Dove Lane
Zipcode : 10011
Nation : US
Tel : 347-526-4950
Fax :